VULNERABILITY INTELLIGENCE
CVE-2026-45040
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-05-28
Last modified2026-06-17
Description
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RUST_LOG=debug sensitive credentials including SessionToken (JWT), SecretAccessKey, and full JWT claims are printed in plaintext to the server logs. This vulnerability is fixed in 1.0.0-beta.2.
Weakness classification
- security-advisories@github.com: CWE-312